Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa
File:                     579b0fa2-ecd4-32e2-9c07-7a9853744660.roa (raw, json)
Hash identifier:          Wy7yv+EMI+NS5JTjnkzTcxaTcPL7FjOjyrzswkGhJ88=
Subject key identifier:   4C:2A:05:54:30:E9:D8:24:25:7E:8F:25:09:09:9F:A8:1D:ED:65:C3
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584D624A65A9EBC5BA04F67D4700
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     401776
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:65:a9:eb:c5:ba:04:f6:7d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=ea733e9e-b979-4d71-9a57-2ccb787776ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:0d:c4:3c:9f:9c:2a:f9:53:1b:07:8d:ce:
                    39:1c:4f:88:81:51:19:58:b6:06:73:bd:79:2d:7d:
                    ff:9f:67:89:f0:c7:d6:6c:1e:27:c2:d4:97:26:c1:
                    e8:15:14:45:3f:5a:89:32:6f:ad:86:59:03:a6:3b:
                    d8:bb:1d:1f:91:6c:d7:c8:6a:46:4f:65:9c:e1:97:
                    ca:5a:2f:c8:0a:5c:30:ca:26:09:c9:ed:1f:39:62:
                    59:c3:c9:58:9c:53:b3:31:80:0c:6a:b8:82:69:3c:
                    1d:84:40:1a:0c:e8:8c:df:55:df:6a:35:b6:7f:4e:
                    82:24:50:82:46:96:4c:68:02:7c:e7:4b:e0:e5:ed:
                    1e:8d:62:44:d9:59:2a:a8:3c:a7:2b:2b:f3:4e:70:
                    2b:6f:fe:b2:31:68:58:bf:63:db:2f:d0:2f:81:a0:
                    6c:60:75:03:54:f6:0f:91:47:a2:d0:31:5b:7d:d1:
                    ed:f3:f1:27:fa:f7:89:6c:87:ad:2d:91:54:04:25:
                    d7:b2:40:36:5e:0d:ee:2b:88:48:db:79:3e:90:3f:
                    00:dc:1c:ab:8f:16:82:07:63:5b:5b:75:54:ae:e7:
                    f6:a9:a5:32:51:0f:27:07:f2:ef:30:bd:d4:84:fe:
                    47:ac:8d:38:51:2c:ba:39:65:58:55:cd:6c:6b:c4:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:05:54:30:E9:D8:24:25:7E:8F:25:09:09:9F:A8:1D:ED:65:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:f0:70:e5:7f:92:9f:27:00:1d:04:5c:88:d1:03:4b:d1:
         2e:e2:9b:10:b3:20:78:54:b1:20:62:5c:01:7f:8f:52:22:7d:
         24:f4:b4:e0:43:3f:09:fd:ef:1d:20:ee:87:d9:0f:cb:8c:cb:
         11:e0:b8:ec:76:42:60:b2:45:05:37:00:1d:b8:c3:e8:9b:89:
         20:c2:75:d8:de:31:e8:0f:67:32:cb:65:da:4e:88:26:ed:74:
         ba:13:bd:82:70:c0:bb:d7:a9:2e:21:f8:52:78:a9:16:f5:77:
         31:19:c2:26:28:7e:cd:7f:f2:84:c7:5a:f2:11:71:a5:06:e3:
         81:fb:9f:2b:76:95:bc:4b:2d:21:28:10:eb:29:55:38:ea:04:
         8e:06:9c:6c:fe:a0:3f:94:63:12:ef:44:0f:82:70:de:0f:90:
         07:f3:d4:ab:d5:63:d1:ea:3f:e4:ff:59:07:93:6a:4a:e1:76:
         be:75:d1:86:2a:39:3d:15:e2:c9:c5:8d:ef:57:76:b1:16:40:
         83:a3:75:fd:c2:91:9c:be:f8:34:23:17:10:89:ae:80:43:c3:
         a6:0b:d5:4b:02:92:2f:df:11:51:a1:b0:60:6b:bc:7e:76:a6:
         0f:8b:4e:62:be:9c:e5:a0:e7:a4:77:11:a4:ab:43:a2:f1:8d:
         28:1c:82:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:30 2026 by rpki-client